Method monitorChild

server/parent.go:236–292

monitorChild waits for a child process to exit and handles cleanup. This should be called in a goroutine after spawnChild.

(child *ChildProcess)

// monitorChild waits for a child process to exit and handles cleanup.
// This should be called in a goroutine after spawnChild.
func (s *Server) monitorChild(child *ChildProcess) {
	// Wait for the child process to exit
	err := child.Cmd.Wait()

	// Get exit code
	exitCode := 0
	if err != nil {
		if exitErr, ok := err.(*exec.ExitError); ok {
			exitCode = exitErr.ExitCode()
		} else {
			exitCode = ExitError
		}
	}
	child.exitCode = exitCode

	duration := time.Since(child.StartTime)

	// Handle auth failure exit code
	if exitCode == ExitAuthFailure {
		// Record failed auth for rate limiting
		// We need to parse the remote address to get a net.Addr
		addr, err := net.ResolveTCPAddr("tcp", child.RemoteAddr)
		if err == nil {
			banned := s.rateLimiter.RecordFailedAuth(addr)
			if banned {
				slog.Warn("IP banned after child auth failure", "remote_addr", child.RemoteAddr)
			}
		}
		slog.Warn("Child process exited with auth failure",
			"pid", child.PID,
			"username", child.Username,
			"remote_addr", child.RemoteAddr,
			"duration", duration,
		)
	} else if exitCode != ExitSuccess {
		slog.Error("Child process exited with error",
			"pid", child.PID,
			"username", child.Username,
			"remote_addr", child.RemoteAddr,
			"exit_code", exitCode,
			"duration", duration,
		)
	} else {
		slog.Info("Child process exited cleanly",
			"pid", child.PID,
			"username", child.Username,
			"remote_addr", child.RemoteAddr,
			"duration", duration,
		)
	}

	// Remove from tracker
	s.childTracker.Remove(child.PID)

	// Signal that this child is done
	close(child.done)
}